抵抗物理克隆攻击的车载遥控门锁双因子认证协议

Vehicle RKE two-factor authentication protocol resistant to physical cloning attack

攻击者通过伪造车辆遥控钥匙发送的无线射频识别(RFID)信号可以非法开启车辆;而且当车辆遥控钥匙丢失或被盗窃,攻击者可以获取钥匙内部秘密信息并克隆出可用的车辆遥控钥匙,会对车主的财产与隐私安全造成威胁。针对上述问题,提出一种抵抗物理克隆攻击的车载遥控门锁(RKE)双因子认证(VRTFA)协议。该协议基于物理不可克隆函数(PUF)和生物指纹特征提取与恢复函数,使合法车辆遥控钥匙的特定硬件物理结构无法被伪造。同时,引入生物指纹因子构建双因子身份认证协议,消除车辆遥控钥匙被盗用的安全隐患,进一步保障车载RKE系统的安全双向认证。利用BAN逻辑对协议进行安全性分析的结果表明,VRTFA协议可以抵抗伪造攻击、去同步攻击、重放攻击、中间人攻击、物理克隆攻击以及密钥全泄漏攻击等恶意攻击,并满足前向安全性、双向认证性、数据完整性和不可追踪性等安全属性。性能分析表明,VRTFA协议与现有的RFID认证协议相比具有更强的安全性与隐私性和更好的实用性。

Attackers can illegally open a vehicle by forgeing the Radio Frequency IDentification(RFID)signal sent by the vehicle remote key.Besides,when the vehicle remote key is lost or stolen,the attacker can obtain the secret data inside the vehicle remote key and clone a usable vehicle remote key,which will threaten the property and privacy security of the vehicle owner.Aiming at the above problems,a Vehicle RKE Two-Factor Authentication(VRTFA)protocol for vehicle Remote Keyless Entry(RKE)that resists physical cloning attack was proposed.The protocol is based on Physical Uncloneable Function(PUF)and biological fingerprint feature extraction and recovery functions,so that the specific hardware physical structure of the legal vehicle remote key cannot be forged.At the same time,the biological fingerprint factor was introduced to build a two-factor authentication protocol,thereby solving the security risk of vehicle remote key theft,and further guaranteeing the secure mutual authentication of vehicle RKE system.Security analysis results of the protocol using BAN logic show that VRTFA protocol can resist malicious attacks such as forgery attack,desynchronization attack,replay attack,man-in-the-middle attack,physical cloning attack,and full key leakage attack,and satisfy the security attributes such as forward security,mutual authentication,data integrity,and untraceability.Performance analysis results show that VRTFA protocol has stronger security and privacy and better practicality than the existing RFID authentication protocols.